Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2025/12/06 11:56 a.m.7 views

CVE-2025-13620

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3. This is due to the REST routes wslu/v1/checkcache/type, wslu/v1/savecache/type, and wslu/v1/settings/clearcountercache being registered with...

5.3CVSS5.8AI score0.00328EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/05 12:30 p.m.5 views

EUVD-2025-201405

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3. This is due to the REST routes wslu/v1/checkcache/type, wslu/v1/savecache/type, and wslu/v1/settings/clearcountercache being registered with...

5.3CVSS5.3AI score0.00328EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/05 10:57 a.m.24 views

CVE-2025-13620 Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3. This is due to the REST routes wslu/v1/checkcache/type, wslu/v1/savecache/type, and wslu/v1/settings/clearcountercache being registered with...

5.3CVSS0.00328EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/05 10:57 a.m.4 views

CVE-2025-13620 Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3. This is due to the REST routes wslu/v1/checkcache/type, wslu/v1/savecache/type, and wslu/v1/settings/clearcountercache being registered with...

5.3CVSS5.4AI score0.00328EPSS
Exploits0References3
CVE
CVE
added 2025/12/05 10:57 a.m.20 views

CVE-2025-13620

CVE-2025-13620 (WordPress) affects the WP Social Login and Register Social Counter plugin (versions up to 3.1.3). Multiple REST routes (wslu/v1/check_cache/{type}, wslu/v1/save_cache/{type}, wslu/v1/settings/clear_counter_cache) were registered with permission_callback set to __return_true and la...

5.3CVSS5.4AI score0.00328EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.4 views

WordPress plugin Wp Social Login and Register Social Counter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security vulnerability...

5.3CVSS6.5AI score0.00328EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.9 views

PT-2025-49240

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3. This is due to the REST routes wslu/v1/check cache/type, wslu/v1/save cache/type, and wslu/v1/settings/clear counter cache being registered with...

5.3CVSS5.7AI score0.00328EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/12/04 11:32 p.m.10 views

WordPress Wp Social Login and Register Social Counter plugin <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering vulnerability

Missing Authorization in Cache REST Endpoints to Social Counter Tampering vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Wp Social versions = 3.1.3...

5.3CVSS6.8AI score0.00328EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-12060

Malicious code in bioql PyPI...

7.2CVSS7.7AI score0.00467EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/26 5:19 p.m.17 views

CVE-2025-46473

Deserialization of Untrusted Data vulnerability in Prisna Social Counter social-counter allows Object Injection.This issue affects Social Counter: from n/a through = 2.0.5...

7.2CVSS7.2AI score0.00467EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/24 5:42 p.m.7 views

WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Social Counter versions = 2.0.5...

7.2CVSS8.4AI score0.00467EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/24 4:15 p.m.7 views

CVE-2025-46473

Deserialization of Untrusted Data vulnerability in Prisna Social Counter social-counter allows Object Injection.This issue affects Social Counter: from n/a through = 2.0.5...

7.2CVSS0.00467EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/24 4:9 p.m.15 views

CVE-2025-46473 WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Prisna Social Counter social-counter allows Object Injection.This issue affects Social Counter: from n/a through = 2.0.5...

7.2CVSS0.00467EPSS
Exploits0References1
CVE
CVE
added 2025/04/24 4:9 p.m.50 views

CVE-2025-46473

CVE-2025-46473 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin Social Counter (djjmz Social Counter), affecting versions up to 2.0.5. The issue allows PHP Object Injection, with a CVSSv3.1 base score of 7.2 (High) and impact on confidentiality, integrity, and a...

7.2CVSS7.2AI score0.00467EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/24 4:9 p.m.5 views

CVE-2025-46473 WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Prisna Social Counter social-counter allows Object Injection.This issue affects Social Counter: from n/a through = 2.0.5...

7.2CVSS8.6AI score0.00467EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.4 views

PT-2025-17788 · Unknown · Djjmz Social Counter

Name of the Vulnerable Software and Affected Versions: djjmz Social Counter versions 2.0.5 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.0.5 and earlier, update to a version that contains a fix fo...

7.2CVSS7.3AI score0.00467EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.3 views

WordPress plugin Social Counter 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS7.5AI score0.00467EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/28 12:0 a.m.6 views

WordPress plugin Wp Social Login and Register Social Counter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS7.5AI score0.00188EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/10/28 7:59 a.m.4 views

WordPress Wp Social Login and Register Social Counter plugin <= 3.0.7 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin Wp Social versions = 3.0.7...

9.8CVSS7AI score0.00782EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/26 12:0 a.m.3 views

WordPress plugin Wp Social Login and Register Social Counter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

9.8CVSS6.7AI score0.00782EPSS
Exploits0References4
Rows per page
Query Builder